$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5786d007-f57b-4159-a9a9-f15993359aff.cer File: 5786d007-f57b-4159-a9a9-f15993359aff.cer (raw, json) Hash identifier: b4psjb8PsheL2/ll0bf3/Bsml0AAf6Gpz44rOiamYKE= Subject key identifier: 14:61:7A:0B:4D:03:6D:C7:58:1C:C4:6D:8B:AB:06:1B:87:DC:99:2D Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285848DA6970E217F7EE0C70435080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5786d007-f57b-4159-a9a9-f15993359aff/5786d007-f57b-4159-a9a9-f15993359aff.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5786d007-f57b-4159-a9a9-f15993359aff/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 12 Feb 2025 01:45:33 +0000 Certificate not after: Tue 18 May 2027 00:45:33 +0000 Subordinate resources: AS: 22804 IP: 161.129.0.0/20 IP: 199.102.88.0/22 IP: 204.80.86.0/23 IP: 208.79.164.0/22 IP: 2605:9280::/32 IP: 2620:3a:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:69:70:e2:17:f7:ee:0c:70:43:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Feb 12 01:45:33 2025 GMT Not After : May 18 00:45:33 2027 GMT Subject: CN=5786d007-f57b-4159-a9a9-f15993359aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:19:26:ba:8d:65:d3:ff:5a:c0:13:e5:d2:c0: 2a:c4:89:6f:bb:47:a0:5b:ed:f6:ed:21:b6:fe:cf: 84:ef:1c:ea:64:3d:e8:6f:8f:81:09:40:79:24:ec: 95:57:dd:e8:0f:d9:c7:53:56:24:7c:78:fd:8d:1a: 64:27:8f:2e:09:e1:c0:d4:15:9e:40:77:b2:0a:9a: 56:11:f7:dc:78:a5:dc:f9:6c:e1:9e:5d:57:73:51: 60:9b:0a:c4:8e:8f:9f:d9:35:47:3e:0a:55:c0:54: ed:bd:66:aa:3f:5e:75:00:54:de:4b:52:97:98:51: 4f:f4:ae:db:5f:79:4c:61:4d:f4:8f:83:98:f5:dd: 81:46:f8:ca:e0:3e:8b:78:8e:ba:75:c3:73:bd:9b: 9b:e8:9f:8e:6b:77:4d:45:1e:2c:00:38:9e:fc:c9: c7:36:15:a6:0c:e8:cc:bb:2e:cd:98:c8:5e:0f:43: 95:47:fe:2e:05:4c:a3:39:fd:79:55:bb:9a:0c:70: 3c:99:f1:90:7e:7e:7d:db:42:7b:da:70:90:59:26: 6b:84:24:d5:eb:3f:6e:17:b3:8a:a5:01:28:b2:1e: f6:95:36:e0:e9:b9:b1:4e:2f:7c:fa:6e:0b:64:9f: 75:9f:af:24:cb:cc:6d:40:d1:5f:32:7e:81:23:a7: af:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:61:7A:0B:4D:03:6D:C7:58:1C:C4:6D:8B:AB:06:1B:87:DC:99:2D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5786d007-f57b-4159-a9a9-f15993359aff/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5786d007-f57b-4159-a9a9-f15993359aff/5786d007-f57b-4159-a9a9-f15993359aff.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 161.129.0.0/20 199.102.88.0/22 204.80.86.0/23 208.79.164.0/22 IPv6: 2605:9280::/32 2620:3a:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22804 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:62:51:eb:4f:45:a1:e1:56:d3:08:c1:39:8e:b4:e6:7c:a1: ff:61:f6:1e:0a:3f:00:43:6f:d3:a9:be:02:52:07:68:4f:ab: f0:bd:06:21:c0:39:d6:00:1e:b6:3c:32:20:10:f6:82:ed:91: 15:34:e8:07:29:88:15:a7:2d:91:91:00:13:3a:cb:c3:ad:19: b0:8c:0c:9e:94:ef:80:5c:c7:7d:1c:ab:02:73:f8:12:ea:29: 76:2d:68:29:90:04:f2:40:0e:15:05:08:70:89:c2:f1:eb:1e: 48:bd:6b:11:e9:b8:06:28:ee:9b:bb:8d:c7:92:fc:9d:32:74: 98:54:99:38:42:99:6f:f2:e2:e5:3b:40:5f:b6:de:45:6f:23: e3:31:ee:c1:b9:b3:44:46:9a:4b:3c:0e:03:fb:f5:2d:c0:61: d4:79:10:41:71:d4:e3:00:f9:fd:51:6d:34:bd:60:37:05:7b: dc:52:e4:e1:d3:c4:f8:2e:4e:5b:40:a5:0b:69:7b:3a:ff:ac: 3f:b2:5f:2e:b9:02:6c:b8:3e:54:e8:a7:aa:5c:1f:a7:14:56: ec:c1:8b:42:3c:96:b6:6b:74:b5:32:67:80:b9:1b:71:02:20: 91:2b:79:c0:18:16:9f:3c:86:55:bf:90:fb:aa:8b:32:79:72: 83:2c:3b:ac -----BEGIN CERTIFICATE----- MIIHMjCCBhqgAwIBAgIUAQ0Mn0MoWEjaaXDiF/fuDHBDUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDIxMjAxNDUzM1oXDTI3MDUxODAwNDUzM1owLzEtMCsGA1UEAxMk NTc4NmQwMDctZjU3Yi00MTU5LWE5YTktZjE1OTkzMzU5YWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBkmuo1l0/9awBPl0sAqxIlvu0egW+327SG2 /s+E7xzqZD3ob4+BCUB5JOyVV93oD9nHU1YkfHj9jRpkJ48uCeHA1BWeQHeyCppW EffceKXc+Wzhnl1Xc1FgmwrEjo+f2TVHPgpVwFTtvWaqP151AFTeS1KXmFFP9K7b X3lMYU30j4OY9d2BRvjK4D6LeI66dcNzvZub6J+Oa3dNRR4sADie/MnHNhWmDOjM uy7NmMheD0OVR/4uBUyjOf15VbuaDHA8mfGQfn5920J72nCQWSZrhCTV6z9uF7OK pQEosh72lTbg6bmxTi98+m4LZJ91n68ky8xtQNFfMn6BI6ev6QIDAQABo4IERDCC BEAwHQYDVR0OBBYEFBRhegtNA23HWBzEbYurBhuH3JktMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81 Nzg2ZDAwNy1mNTdiLTQxNTktYTlhOS1mMTU5OTMzNTlhZmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzU3ODZkMDA3LWY1N2ItNDE1OS1h OWE5LWYxNTk5MzM1OWFmZi81Nzg2ZDAwNy1mNTdiLTQxNTktYTlhOS1mMTU5OTMz NTlhZmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwSQYIKwYBBQUH AQcBAf8EOjA4MB4EAgABMBgDBAShgQADBALHZlgDBAHMUFYDBALQT6QwFgQCAAIw EAMFACYFkoADBwAmIAA6gAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICWRQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAGmJR609FoeFW0wjBOY605nyh/2H2Hgo/AENv06m+AlIHaE+r8L0GIcA5 1gAetjwyIBD2gu2RFTToBymIFactkZEAEzrLw60ZsIwMnpTvgFzHfRyrAnP4Euop di1oKZAE8kAOFQUIcInC8eseSL1rEem4Bijum7uNx5L8nTJ0mFSZOEKZb/Li5TtA X7beRW8j4zHuwbmzREaaSzwOA/v1LcBh1HkQQXHU4wD5/VFtNL1gNwV73FLk4dPE +C5OW0ClC2l7Ov+sP7JfLrkCbLg+VOinqlwfpxRW7MGLQjyWtmt0tTJngLkbcQIg kSt5wBgWnzyGVb+Q+6qLMnlygyw7rA== -----END CERTIFICATE-----Generated at Mon Apr 28 15:44:25 2025 by rpki-client